Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          GyOTZwjT2Sr5wyELLbagYGXmVRmeKSRv9fIzidM0GSA=
Subject key identifier:   D9:BB:F6:7F:D8:35:80:C6:7C:F7:98:51:69:12:70:93:7D:46:7F:0D
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0D03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0CE5
Signing time:             Sat 18 Oct 2025 18:51:36 +0000
Manifest this update:     Sat 18 Oct 2025 18:51:35 +0000
Manifest next update:     Sat 25 Oct 2025 18:51:35 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: w/5q4nz2D63es92fheRAQ+W588UluT+faGJ1J5YOMQo=)
                          2: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
                          3: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
                          4: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
                          5: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3331 (0xd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Oct 18 18:51:35 2025 GMT
            Not After : Oct 25 18:51:35 2025 GMT
        Subject: CN=68f3e1b8-3afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:13:34:9d:ec:8d:49:61:f3:04:26:f0:a8:
                    86:39:01:b6:a1:f9:8f:08:eb:4d:33:18:7a:7e:bf:
                    1e:6f:c0:af:5c:52:51:c9:89:74:19:a6:ec:88:cf:
                    26:44:af:0e:68:b7:7c:5c:bd:73:76:a2:c1:b3:d3:
                    80:a4:12:24:9a:6c:53:a5:a1:91:6c:45:3f:c1:fe:
                    db:c1:fe:dd:28:4b:d5:11:d2:c9:5a:c6:40:dc:26:
                    55:e7:bb:3e:eb:a1:e2:c4:38:e7:a3:99:da:99:e6:
                    f0:26:d9:0b:13:f6:22:68:ff:01:69:57:4a:1d:fe:
                    38:3d:2b:01:c0:3b:45:11:c3:17:49:8f:51:d7:0b:
                    cb:53:97:81:60:7d:48:41:a0:eb:59:c5:a8:87:84:
                    3e:a9:8e:a7:6e:ec:22:7f:0f:bf:fc:49:41:d0:62:
                    3b:1b:1d:78:2c:cd:ff:cc:0b:c3:cd:d8:39:95:da:
                    cb:a1:ec:63:93:e2:03:a6:e3:a7:2d:82:8f:78:94:
                    aa:0c:f9:f3:59:fc:05:bc:37:8d:83:b3:dc:cd:2a:
                    e7:ae:75:53:d3:57:aa:5a:f7:31:e3:36:d7:e6:23:
                    66:81:98:b4:d8:d3:9f:83:5c:a4:67:99:02:ac:5b:
                    1a:ce:8e:a5:18:b7:5f:81:70:4f:d7:a1:2f:52:5f:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:F6:7F:D8:35:80:C6:7C:F7:98:51:69:12:70:93:7D:46:7F:0D
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:4e:30:ba:92:3a:72:fe:eb:58:0d:7e:d5:d5:f8:39:a8:13:
         1b:ae:2c:9b:92:6b:b9:57:9d:bb:ef:82:2d:d6:05:ac:81:ab:
         2b:7e:80:05:53:cf:09:af:31:dc:0e:38:fc:51:bc:03:b9:68:
         18:0b:c1:ea:0d:0b:0b:0d:34:03:bb:b8:27:63:6f:31:60:8c:
         13:ab:a7:71:8a:d9:53:23:23:37:25:ec:86:9d:80:bd:dd:e6:
         f2:b0:27:62:e1:2f:28:5d:ac:79:ca:e9:e4:70:60:07:89:38:
         e7:fe:72:2a:ea:85:dc:97:84:f3:19:77:ab:d1:3a:68:62:31:
         6e:00:da:14:1c:44:28:b2:53:11:c9:c5:61:ad:dc:80:28:dc:
         82:91:38:19:e5:4d:78:ca:df:a5:39:3c:bc:a7:43:ef:39:f1:
         c6:40:4b:e5:2c:c3:b7:2c:9a:d4:df:53:1e:9e:70:6b:3d:2e:
         44:20:97:f1:b3:9f:1d:a5:82:5a:96:dd:e1:c8:35:98:e6:02:
         3f:3c:bc:15:cc:35:c7:45:14:6c:0c:7d:9e:52:45:69:31:cf:
         5b:74:b6:e9:76:55:ea:3a:db:bd:f7:c1:47:6b:d3:c7:22:5f:
         e5:ac:6d:41:12:7f:76:a9:88:68:3f:02:80:79:b3:da:50:a5:
         78:dd:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:21 2025 by rpki-client